salesagility / SuiteCRM

SuiteCRM - Open source CRM for the world
https://www.suitecrm.com
GNU Affero General Public License v3.0
4.45k stars 2.08k forks source link

LDAP synced users cannot remote login #9540

Open mr2017x opened 2 years ago

mr2017x commented 2 years ago

Hi,

on several use cases i face the issue, that ldap synced users doesn't seem to be able to login to suitecrm when not using the standard website (Api, Apps, Nextcloud SuiteCRM INtegration etc). With internal database users those problems aren't.

Version is from 7.x until now (7.12.5) (long duration)

Issue

Login should be possible as it is possible with ldap-backed users at standard login form of suitecrm

Expected Behavior

Users which accounts are synced by an ldap/active directory backend should be able to login through api, apps, etc.

Actual Behavior

No authentication is possible (general failures, no results, wrong password)

Possible Fix

It seems as the backend procedure doesn't route the authentication in a proper way.

Steps to Reproduce

Use https://apps.nextcloud.com/apps/integration_suitecrm or many other apps, apis etc.

Context

simple and secure environment without several different user/password combinations. (one user one credential, extended sso)

Your Environment

Thanks in advance

samus-aran commented 2 years ago

HI @mr2017x This is a suggestion as we can not support third party integrations. Having a look at the Nextcloud integration I couldn't see where they identified that they support LDAP either. The assumption is that it doesn't.

mr2017x commented 2 years ago

HI @mr2017x This is a suggestion as we can not support third party integrations. Having a look at the Nextcloud integration I couldn't see where they identified that they support LDAP either. The assumption is that it doesn't.

Hi @samus-aran sure, nextcloud does support ldap (better than suite 8.1 blessing and hoping for 8.2 <3)

https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/user_auth_ldap.html

and as tested the internal deployed users can login with issues.

Thanks in advance.

(No Support, but maybe a hint for future processing of login requests in general)